There are multiple ways in which we can run arbitrary short-code in the woof_draw_products function. As a bonus point it can be run as an unauthenticated user as well, not that creating a user with WooCommerce would be that hard.